Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33322d3332203d3e20323638303838.roa
File:                     323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (raw, json)
Hash identifier:          kXywuNXSAXv900IZ8bdVStMfIoMgLiLcspMm1beBKg8=
Subject key identifier:   D4:B1:06:72:97:67:F0:C5:27:73:AE:40:0E:3C:84:DD:F2:5C:51:D9
Certificate issuer:       /CN=94A3DB62B012EF07C9AFE1762646CC714080A576
Certificate serial:       7E663CF21F4457AB2671B2572F76602A1BA18798
Authority key identifier: 94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33322d3332203d3e20323638303838.roa
Signing time:             Fri 27 Oct 2023 15:56:53 +0000
ROA not before:           Fri 27 Oct 2023 15:51:53 +0000
ROA not after:            Fri 25 Oct 2024 15:56:53 +0000
asID:                     268088
IP address blocks:        2804:57d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:3c:f2:1f:44:57:ab:26:71:b2:57:2f:76:60:2a:1b:a1:87:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
        Validity
            Not Before: Oct 27 15:51:53 2023 GMT
            Not After : Oct 25 15:56:53 2024 GMT
        Subject: CN=D4B106729767F0C52773AE400E3C84DDF25C51D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:c1:4c:25:19:67:49:56:cd:5d:2e:08:6e:
                    e1:c5:70:c1:af:20:8f:4a:03:d1:7e:d4:34:a9:b6:
                    5b:16:91:76:8b:a8:bf:a9:8c:1d:c5:6d:32:72:4e:
                    1d:18:bb:33:27:8f:76:de:83:46:67:b5:75:26:84:
                    31:cc:56:9d:f0:3c:b3:c3:bb:04:88:d0:6a:03:7c:
                    12:10:d5:36:02:0b:49:ea:4f:56:57:7f:b2:ce:2e:
                    10:72:d1:73:cf:23:87:e8:d6:cb:1a:ca:81:27:db:
                    79:1e:03:99:92:70:d5:a2:11:13:98:c5:da:9b:6f:
                    39:55:eb:83:1a:7c:49:21:17:aa:1d:5d:a6:ff:9a:
                    3d:1b:1a:52:42:77:0b:0b:10:68:5c:95:e5:1f:b2:
                    02:de:e1:61:86:24:28:7c:5d:81:ef:5d:ab:ee:ea:
                    48:31:00:71:06:dc:24:24:1a:db:f4:45:c9:12:1f:
                    bb:b9:06:41:f2:c2:06:e7:45:31:b4:03:06:ce:4c:
                    ca:fc:da:dd:99:84:bb:60:27:b2:f5:77:27:d5:bd:
                    b9:fb:4d:93:47:97:04:bd:2d:90:41:b8:5a:80:18:
                    2c:da:a8:13:01:08:ed:f2:a9:01:c8:00:4b:16:cc:
                    d2:27:d9:a5:c6:50:33:57:58:4c:ea:52:f1:3a:c0:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B1:06:72:97:67:F0:C5:27:73:AE:40:0E:3C:84:DD:F2:5C:51:D9
            X509v3 Authority Key Identifier:
                keyid:94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33322d3332203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:7a:b8:d2:af:21:8b:0b:dc:04:25:bd:05:a8:20:ff:74:
         ec:60:13:3a:96:ba:9a:84:c7:cb:00:e0:95:28:55:be:03:c2:
         f1:d9:86:9f:35:c2:80:ff:14:84:b5:b7:58:77:4f:4e:d6:d6:
         c5:a1:98:75:7c:f6:79:87:99:5d:87:c2:08:06:06:32:2a:2e:
         45:66:f0:55:0a:f8:59:5e:1a:ae:10:7b:d3:7d:c8:65:b1:76:
         e1:61:cf:b0:16:cd:6c:3b:b4:f8:b7:a2:10:76:87:71:30:17:
         68:83:e8:00:8c:97:4a:db:29:68:87:b5:55:f0:28:ec:70:6c:
         14:57:f2:2d:99:b7:18:0f:8a:41:32:3b:50:80:df:4a:71:01:
         3b:d7:c9:9b:9c:07:b5:9b:94:68:d1:29:97:6c:13:5f:d4:1c:
         6c:af:07:8d:fb:63:22:b1:bf:60:cd:ec:ca:76:2b:09:ae:8d:
         2a:14:7d:3e:a9:b4:4d:ef:81:e4:4a:0c:2c:fc:3e:1d:16:8d:
         5b:da:1f:64:0f:49:b6:e1:97:93:da:ba:73:15:3a:d8:fe:a9:
         9b:a3:e5:00:3d:23:ac:0c:45:89:ad:c9:98:b5:d0:10:34:a1:
         27:1b:a1:e9:89:69:af:ad:e5:a3:f9:38:f6:8e:da:67:d5:cf:
         80:3e:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org